xiaohongshu-rednote-trending-notes-scraper

SUSPICIOUS. The stated purpose matches trend scraping, but the skill expands scope by automatically installing and invoking the separate BrowserAct skill/CLI without user confirmation. The dependency appears to be an official same-org runtime rather than an obviously malicious payload, so this is best classified as a medium-risk transitive supply-chain and execution-trust issue, not confirmed malware.